Add ssh-keygen -Y match-principals operation to perform matching of
authordjm <djm@openbsd.org>
Sat, 27 Nov 2021 07:14:46 +0000 (07:14 +0000)
committerdjm <djm@openbsd.org>
Sat, 27 Nov 2021 07:14:46 +0000 (07:14 +0000)
commit8c0edb7eb9d523024b22aaad80f1348c03e7e4b2
treed853242a143cfd2325f4f015b80f44b1775b3467
parentfee0938b44b66428409faeb674a206e38e58a39a
Add ssh-keygen -Y match-principals operation to perform matching of
principals names against an allowed signers file.

Requested by and mostly written by Fabian Stelzer, towards a TOFU
model for SSH signatures in git. Some tweaks by me.

"doesn't bother me" deraadt@
usr.bin/ssh/ssh-keygen.1
usr.bin/ssh/ssh-keygen.c
usr.bin/ssh/sshsig.c
usr.bin/ssh/sshsig.h